Red Hat Updates
2473Warning Date
Severity Level
Warning Number
Target Sector
5 August, 2020
● High
2020-1594
All
Description:
Red Hat has released security updates to address vulnerabilities in the following products:
- kpatch-patch
- Red Hat Enterprise Linux for x86_64 - Extended Update Support
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support
- Red Hat Enterprise Linux Server - Update Services for SAP Solutions
- Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
- dbus
- Red Hat Enterprise Linux for x86_64 - Extended Update Support
- Red Hat Enterprise Linux for ARM 64 - Extended Update Support
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support
- Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
- Red Hat Enterprise Linux Server - Update Services for SAP Solutions
- Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
- python-pillow
- Red Hat Enterprise Linux for ARM 64 - Extended Update Support
- Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
- Red Hat Enterprise Linux for Power, little endian - Extended Update Support
- Red Hat Enterprise Linux for x86_64 - Extended Update Support
- Red Hat Enterprise Linux Server - Update Services for SAP Solutions
- Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions
- JBoss Web Server 3.1 Service Pack 10
- JBoss Enterprise Web Server
- Red Hat JBoss Web Server 5.3.2
- JBoss Enterprise Web Server
- RHV Manager (ovirt-engine) 4.4
- Red Hat Virtualization Manager
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Unauthorized disclosure of information
Best practice and Recommendations:
The CERT team encourages users to review Red Hat security advisory and apply the necessary updates:
- https://access.redhat.com/errata/RHSA-2020:3297
- https://access.redhat.com/errata/RHSA-2020:3298
- https://access.redhat.com/errata/RHSA-2020:3299
- https://access.redhat.com/errata/RHSA-2020:3302
- https://access.redhat.com/errata/RHSA-2020:3303
- https://access.redhat.com/errata/RHSA-2020:3305
- https://access.redhat.com/errata/RHSA-2020:3306
- https://access.redhat.com/errata/RHSA-2020:3308
- https://access.redhat.com/errata/RHSA-2020:3247